proomt

Search

Search posts, papers, and topics

Hall of Fame

Hall of FameRoss Anderson20205 min readrelease notesintro

Security Engineering

Read on cam.ac.uk

Summary

Ross Anderson’s third edition of Security Engineering is now released, with the full text and individual chapter PDFs available for free online after a brief embargo. The book spans 29 chapters covering threat modeling, cryptography, distributed systems, economics, and more, and is supported by 15 teaching videos.

  • Free online PDFs of all 29 chapters (plus bibliography) are available after a short publisher embargo.
  • The book provides a comprehensive reference on security topics from psychology to side‑channels and nuclear command‑and‑control.
  • 15 lecture‑style videos map to the chapters, useful for teaching or self‑study.
  • Anderson’s release model mirrors Dickens‑style instalments and ensures the content stays free forever.

Security engineers and system designers need a single, thorough, freely accessible reference covering the full spectrum of security engineering principles.

4/10
securitydistributed systemseconomicscryptographysecurity engineering

Related reading

  1. Article: Architecting Secure and Scalable Facial Verification Systems

    A real‑world post‑mortem of a high‑volume face verification service that moved from a naïve synchronous API to an async, layered pipeline (edge validation, preprocessing, decoupled detection/verification, decision engine) to achieve 8.5k rpm, p99 < 1.8 s, 30 % cost savings, and strict privacy controls.

    InfoQinfoq.com15 min

  3. Cloud CISO Perspectives: How Google monitors AI threats and advances AI defenses

    Google’s Threat Intelligence team outlines three AI‑driven shifts—software build changes, expanded attack surface, and enhanced threat capabilities—then describes their multi‑model, graph‑based defense stack (AI Threat Tracker, in‑editor “spellcheck”, Wiz Security Graph, Gemini‑powered AI Threat Defense) and concrete threat examples like supply‑chain poisoning, LLMJacking, and AI‑orchestrated cre…

    Google Cloud Bloggoogle.com11 min

  4. AI Security Is an Engineering Problem — How to Solve It at Every Layer of the Agent Stack

    Nvidia frames AI security as an engineering discipline, outlining required controls across the AI agent stack (model, harness, runtime) and advocating for enforceable boundaries, traceable identities, and evidence‑based testing. It highlights OpenShell as a sandboxed runtime, the Open Secure AI Alliance, and several vendor tools for testing and red‑team exercises.

    Nvidianvidia.com4 min

  5. Article: Your Next DSL Author Is a Language Model

    Typed Domain Grounding (TDG) embeds a DSL inside a mainstream language the LLM already knows (e.g., Kotlin) and uses the host compiler as an oracle. The author describes five building blocks—embedding, choosing a host language with high training‑data frequency, compiler‑driven type safety, a generate‑compile‑repair loop, and an on‑demand teaching tool—and shows measured results from kUML, a Kotli…

    InfoQinfoq.com18 min

  6. Podcast: Securing AI Agents: Identity, Authorization, and the DPACT Framework

    This podcast discusses the critical challenges of identity, authorization, and security for AI agents. It introduces the DPACT framework (Delegation, Policy, Auditability, Context, Time) as a blueprint for building responsible agentic systems with bounded, delegated authority, moving beyond simple token-based access.

    InfoQinfoq.com29 mintalk